Not running genuine windows / Update failure Code 8000FFFF

zatoichi · Dec 22, 2012

Hi, my problems began with a reoccurring failure to successfully install Windows Security updates. I could manually install some, but the rest refused to install. I kind of ignored it at that point. Then I started getting a pop up in the last few days saying "This computer is not running genuine windows 7". The link the pop-up sends me to just has a page selling Windows 7 on it.

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-RHM4F-XXKF7-FQBDJ
Windows Product Key Hash: J9iSPXkEA5gREmpno1G6EhJiFRA=
Windows Product ID: 00359-OEM-8703523-32454
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {D8FC5205-EDB2-44F9-B432-452FFC73FA2D}(3)
Is Admin: No
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{D8FC5205-EDB2-44F9-B432-452FFC73FA2D}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-FQBDJ</PKey><PID>00359-OEM-8703523-32454</PID><PIDType>3</PIDType><SID>S-1-5-21-1824987342-805327891-4119898605</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1502</Version><SMBIOSVersion major="2" minor="6"/><Date>20110302000000.000000+000</Date></BIOS><HWID>679B3107018400FE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: 586bc076-c93d-429a-afe5-a69fbc644e88
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00174-035-232454-02-2057-7600.0000-1702011
Installation ID: 017152506234670203566174359162189534548124124932939095
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: FQBDJ
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 23/12/2012 01:44:21

Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000001EFF0
Event Time Stamp: 12:22:2012 19:27
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys


HWID Data-->
HWID Hash Current: NgAAAAEAAgABAAEAAgACAAAAAwABAAEAln0eu2QffOkaXcaedmusiw6nkLTMRY407g5mIC5z

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            ALASKA        A M I
  FACP            ALASKA        A M I
  HPET            ALASKA        A M I
  MCFG            ALASKA        A M I
  SSDT            AMICPU        PROC

I caught CHKDSK running on boot maybe a week ago, I'm not sure if that is related.

Thanks for any help.

ICIT2LOL · Dec 23, 2012

Hello and welcome zatoichi mate the chkdsk running sounds rather suspect to me as you have to start that process - as far as I am aware.

Do a Malwarebytes and SuperAntiSpyware scan/s

Malwarebytes : Free anti-malware download

SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

(the scans can be done in safe mode - tap F8 on power up)

if clear then try this then try this
Error message when you use the Windows Update Web site or Microsoft Update Web site to install updates: "0x80070002"

zatoichi · Dec 23, 2012

Both scans in safemode showed nothing suspicous.

Ran SURT again, rebooted, updates still won't install.

Still getting the 'not genuine Windows' pop-up.

ICIT2LOL · Dec 23, 2012

Hey Z sorry late reply mate - work. Now do you know if you have the update readiness tool? as it is necessary for some updates try this Download System Update Readiness Tool for Windows Server 2008 R2 x64 Edition (KB947821) [November 2012] from Official Microsoft Download Center

It might say you needa server pack as well do that too.

zatoichi · Dec 23, 2012

Yeah, I have that tool. I've ran it twice so far, with multiple restarts to try and get things installed. But it doesn't seem to work. The yellow shield update icon is consistantly over the shutdown option. But everytime I check Windows Update after reboot, the same number of updates are waiting to be installed, and fail to install when I try.

ICIT2LOL · Dec 23, 2012

Now just to backtrack Z the Windows 7 is that an OEM or retail version you have?

Now in my last post I mentioned you need another piece of software for it to run and that is the Windows Server 2088 R2 Download Windows Server 2008 R2 with SP1

then try this Download System Update Readiness Tool for Windows Server 2008 R2 x64 Edition (KB947821) [November 2012] from Official Microsoft Download Center again and we will see if that fixes the problem. I had this a while ago and always make sure I have got it on board to start with.

zatoichi · Dec 23, 2012

When I try to install Windows Server 2008 via upgrade I get this

oh, and my Windows 7 is OEM.

ICIT2LOL · Dec 23, 2012

Well I know it is a pain Z but maybe another install would be the best as it looks like it isn't going to do anything for you.

Now an alternative is to make a bootable USB stick with a Windows ISO you can download that from
Download Windows 7 ISO (Official 32-bit and 64-bit Direct Download Links) « My Digital Life download the right version first - it is quite legitimate - I have done this on a few occasions now where the CD install goes pear shaped.

Then set your BIOS to boot from the USB save the settings and hit enter after first putting the stick in the machine and it will boot and take you into the installation - have the activation code ready from the OEM you bought and use that when it asks for it - because that OEM is tied to the motherboard permanently - not the hard drive.

This way it may avoid any problem with the CD you have. I know this is a real pain but if it gets you going then worth the trouble.

If you have some way of cleaning that hard drive up and aligning it first then that is a good idea use this
http://www.sevenforums.com/tutorials/113967-ssd-alignment.html < I know it says SSD but I use it for SSD's and spinners alike. If you can't do this the Windows install should be suffice. Plus save any data before you do if you have photos docs etc on the drive.

zatoichi · Dec 23, 2012

I was thinking of buying an SSD to use for OS and other programs. Could I just install my OS on a new SSD, and delete the OS from my current boot HDD while retaining all my programs and files? Or will there be some kind of conflict between the two?

ICIT2LOL · Dec 23, 2012

zatoichi said:
I was thinking of buying an SSD to use for OS and other programs. Could I just install my OS on a new SSD, and delete the OS from my current boot HDD while retaining all my programs and files? Or will there be some kind of conflict between the two?

Absolutely Z I hoped this was what you would do mate it saves all this mucking around with a spinner

NOw use that USB install all the same - just as a point sometimes you may need to try twice or use the CD it's your choice.

Now if you want my advice go for a SSD that does not have a Sandforce controller as they can be problematical. I use 120GB Samsung 830 and Crucial M4 SSD's as they are just great for anything and the OS and have plenty of space for the CCleaner security and other small apps. The 120GB's are not expensive and a bit better than the smaller ones but that is upo to you and of course your budget.

Now don't forget to set the SSD up with that alignment before you use it and you can run AHCI with these too but you need to set that in the BIOS - you probably know about that anyway. But if you don't this will tell you what it is Advanced Host Controller Interface - Wikipedia, the free encyclopedia .

The alignment tool again is this http://www.sevenforums.com/tutorials/113967-ssd-alignment.html this chap is really on the ball mate and when you do get running this is another must http://www.sevenforums.com/tutorials/11728-optimize-windows-7-a.html?filter[2]=Performance Maintenance

I use both all the time for builds and fixes the old spinners you have once you have stripped out the data you want you can wipe clean and use for data. For that this is good but it does take a fair time to complete as it writes the disk to all zeros as does the diskpart option which I will ref for you.

Best Free Partition Manager Freeware and free partition magic for Windows 7, Windows 8, Windows Vista and Windows XP 32 bit & 64 bit. MiniTool Free Partition Manager Software Home Edition. < VERY handy tool for all sorts of jobs and

http://www.sevenforums.com/tutorials/52129-disk-clean-clean-all-diskpart-command.html < again a lengthy process but is part of the Windows OS.

These are for the hard drives so don't get them mixed up with the SSD when running them - just take your time.

zatoichi · Dec 23, 2012

That sounds good. I think I'll go with the Crucial M4 128GB, looks like it has nice performance/price.

Just a quick question, are you suggesting I format my current boot HDD? Or can I just leave it once I switch the SSD to boot. The only thing I'm worried about is the gigs of game data from Steam etc. on there, that I wouldn't feel safe transferring to another HDD.

Anyway, thanks for all your help. This may be a blessing in disguise and finally get me running a faster SSD equipped system.

ICIT2LOL · Dec 24, 2012

zatoichi said:
That sounds good. I think I'll go with the Crucial M4 128GB, looks like it has nice performance/price.

Just a quick question, are you suggesting I format my current boot HDD? Or can I just leave it once I switch the SSD to boot. The only thing I'm worried about is the gigs of game data from Steam etc. on there, that I wouldn't feel safe transferring to another HDD.

Anyway, thanks for all your help. This may be a blessing in disguise and finally get me running a faster SSD equipped system.

No Z you don't need to format it at all I think maybe it would be an idea to get rid of the old install on it then it would not be a possible problem. I know when you re partition a drive and put a fresh install on it the old one will show up up as Windows old but personally of I wouldn't be mucking around with that.
I will have a look around as I am sure there is some way of saving the games and wipe the old OS cos I have never been in that situation before and I am sure there is a tutorial in here somewhere.
The alternative is to put all your data - games etc onto an external drive then wipe the hard drive and just re install back from the external to it.

Well I wasn't that much help really but I have to say it is nice to help someone out who is realistic about these things and you have done a lot yourself. If you continue on in the forum then I am sure one day you will be able to help someone else out yourself as I like your style.

The SSD choice is good keep in mind the Samsung for another time don't forget the set up of the drive (alignment) and the optimise tutorial once all that is done you will be shocked to see how fast your machine will run. I meant to add make sure the SSD is the only drive connected up when installing.

Keep me up to date on how you go (PM if you have to) and it has been a pleasure to talk to you.

Happy Christmas and I will post back as soon as I find something or PM you.

John

NoelDP · Dec 24, 2012

This may simply be caused by a bad set of Intel Rapid Storage Technology drivers -

Installing the Intel Rapid Storage Drivers
try downloading and installing them from here - http://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&ProdId=2101&DwnldID=21730

(you want the iata_enu.exe download)

Once complete, please reboot twice, then post another MGADiag report.

zatoichi · Dec 26, 2012

After installing and rebooting twice, I tried Windows Update and it seemed to get much further into the install but it failed again with the same code.

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE21
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-RHM4F-XXKF7-FQBDJ
Windows Product Key Hash: J9iSPXkEA5gREmpno1G6EhJiFRA=
Windows Product ID: 00359-OEM-8703523-32454
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {D8FC5205-EDB2-44F9-B432-452FFC73FA2D}(3)
Is Admin: No
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\wat\watux.exe[7.1.7600.16395], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppobjs.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppc.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppwinob.dll[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slc.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\slcext.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppuinotify.dll[6.1.7600.16385], Hr = 0x80092003
File Mismatch: C:\Windows\system32\slui.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\sppcomapi.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppcommdlg.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\sppsvc.exe[6.1.7601.17514], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spsys.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\drivers\spldr.sys[6.1.7127.0], Hr = 0x80092003
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7601.17514], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7601.17514], Hr = 0x800b0100

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{D8FC5205-EDB2-44F9-B432-452FFC73FA2D}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-FQBDJ</PKey><PID>00359-OEM-8703523-32454</PID><PIDType>3</PIDType><SID>S-1-5-21-1824987342-805327891-4119898605</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1502</Version><SMBIOSVersion major="2" minor="6"/><Date>20110302000000.000000+000</Date></BIOS><HWID>679B3107018400FE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: 586bc076-c93d-429a-afe5-a69fbc644e88
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00174-035-232454-02-2057-7600.0000-1702011
Installation ID: 002196252503847002286805074566414003679333322713874662
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: FQBDJ
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 26/12/2012 21:51:50

Windows Activation Technologies-->
HrOffline: 0x8004FE21
HrOnline: N/A
HealthStatus: 0x000000000001EFF0
Event Time Stamp: 12:24:2012 08:01
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\sppobjs.dll
Tampered File: %systemroot%\system32\sppc.dll|sppc.dll.mui
Tampered File: %systemroot%\system32\sppcext.dll|sppcext.dll.mui
Tampered File: %systemroot%\system32\sppwinob.dll
Tampered File: %systemroot%\system32\slc.dll|slc.dll.mui
Tampered File: %systemroot%\system32\slcext.dll|slcext.dll.mui
Tampered File: %systemroot%\system32\sppuinotify.dll|sppuinotify.dll.mui
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration
Tampered File: %systemroot%\system32\sppcomapi.dll|sppcomapi.dll.mui
Tampered File: %systemroot%\system32\sppcommdlg.dll|sppcommdlg.dll.mui
Tampered File: %systemroot%\system32\sppsvc.exe|sppsvc.exe.mui
Tampered File: %systemroot%\system32\drivers\spsys.sys


HWID Data-->
HWID Hash Current: NAAAAAEAAQABAAEAAgACAAAAAwABAAEAln0eu2QfGl0S6nZrDqesi5C0zEWONO4OZiAucw==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            ALASKA        A M I
  FACP            ALASKA        A M I
  HPET            ALASKA        A M I
  MCFG            ALASKA        A M I
  SSDT            AMICPU        PROC

NoelDP · Dec 26, 2012

No change in the report

That probably means that the Catroot2 folder is corrupt.

Please run the following commands in an Elevated Command Prompt

NET STOP CRYPTSVC
REN C:\WINDOWS\SYSTEM32\CATROOT2 CATROOT2OLD
NET START CRYPTSVC

once complete, leave the system alone for at least an hour to rebuild the database, then reboot, and run another MGADiag report.
Note that this will delete your Update History - but all updates will remain installed, and can be viewed in the Installed Updates listing.

zatoichi · Dec 26, 2012

I don't see any mismatch or tampered files anymore. Should I go ahead and try and run Update?

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-RHM4F-XXKF7-FQBDJ
Windows Product Key Hash: J9iSPXkEA5gREmpno1G6EhJiFRA=
Windows Product ID: 00359-OEM-8703523-32454
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {D8FC5205-EDB2-44F9-B432-452FFC73FA2D}(3)
Is Admin: No
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{D8FC5205-EDB2-44F9-B432-452FFC73FA2D}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-FQBDJ</PKey><PID>00359-OEM-8703523-32454</PID><PIDType>3</PIDType><SID>S-1-5-21-1824987342-805327891-4119898605</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1502</Version><SMBIOSVersion major="2" minor="6"/><Date>20110302000000.000000+000</Date></BIOS><HWID>679B3107018400FE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: 586bc076-c93d-429a-afe5-a69fbc644e88
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00174-035-232454-02-2057-7600.0000-1702011
Installation ID: 002196252503847002286805074566414003679333322713874662
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: FQBDJ
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 26/12/2012 23:18:30

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 12:24:2012 08:01
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: NAAAAAEAAQABAAEAAgACAAAAAwABAAEAln0eu2QfGl0S6nZrDqesi5C0zEWONO4OZiAucw==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            ALASKA        A M I
  FACP            ALASKA        A M I
  HPET            ALASKA        A M I
  MCFG            ALASKA        A M I
  SSDT            AMICPU        PROC

NoelDP · Dec 26, 2012

That's looking good to me, as well.

Yep - go ahead and try Windows Update.
Do a manual Check for Updates first.

NoelDP · Dec 26, 2012

... having said that, I suspect that it will fail.
If/when it does, please run another CheckSUR - I want to compare the data that produces with the earlier ones.

meanwhile I'll create a fix for the problems shown up by the earlier reports.

NoelDP · Dec 26, 2012

Just for the record (and so I can find things later...)
here are the errors in the earlier reports

CBS.log

Code:

 Line 3448: 2012-12-23 02:18:44, Info                  CSI    0000030e [SR] Beginning Verify and Repair transaction
 Line 3451: 2012-12-23 02:18:44, Info                  CSI    00000310 [SR] Cannot repair member file [l:24{12}]"iasrecst.dll" of Microsoft-Windows-Networking-Internet_Authentication_Service_DataStore, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3454: 2012-12-23 02:18:45, Info                  CSI    00000312 [SR] Cannot repair member file [l:30{15}]"NlsData002a.dll" of Microsoft-Windows-NaturalLanguage6, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3457: 2012-12-23 02:18:47, Info                  CSI    00000314 [SR] Cannot repair member file [l:20{10}]"viaide.sys" of mshdc.inf, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3460: 2012-12-23 02:18:47, Info                  CSI    00000316 [SR] Cannot repair member file [l:52{26}]"PresentationBuildTasks.dll" of WPF-PresentationBuildTasks, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3463: 2012-12-23 02:18:47, Info                  CSI    00000318 [SR] Cannot repair member file [l:30{15}]"OnLineIDCpl.dll" of Microsoft-Windows-OnLineIDCPL, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3466: 2012-12-23 02:18:47, Info                  CSI    0000031a [SR] Cannot repair member file [l:28{14}]"System.Net.dll" of NetFx35Linq-System.Net, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3469: 2012-12-23 02:18:47, Info                  CSI    0000031c [SR] Cannot repair member file [l:52{26}]"PresentationBuildTasks.dll" of WPF-PresentationBuildTasks, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3470: 2012-12-23 02:18:47, Info                  CSI    0000031d [SR] This component was referenced by [l:162{81}]"Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.NetFx3"
 Line 3475: 2012-12-23 02:18:47, Info                  CSI    00000320 [SR] Could not reproject corrupted file [ml:520{260},l:132{66}]"\??\C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0"\[l:52{26}]"PresentationBuildTasks.dll"; source file in store is also corrupted
 Line 3478: 2012-12-23 02:18:47, Info                  CSI    00000322 [SR] Cannot repair member file [l:28{14}]"System.Net.dll" of NetFx35Linq-System.Net, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3479: 2012-12-23 02:18:47, Info                  CSI    00000323 [SR] This component was referenced by [l:162{81}]"Microsoft-Windows-NetFx3-OC-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.NetFx3"
 Line 3484: 2012-12-23 02:18:47, Info                  CSI    00000326 [SR] Could not reproject corrupted file [ml:520{260},l:144{72}]"\??\C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5"\[l:28{14}]"System.Net.dll"; source file in store is also corrupted
 Line 3485: 2012-12-23 02:18:47, Info                  CSI    00000327 [SR] Repairing corrupted file [ml:520{260},l:120{60}]"\??\C:\Program Files\Common Files\microsoft shared\ink\zh-TW"\[l:30{15}]"tipresx.dll.mui" from store
 Line 3488: 2012-12-23 02:18:47, Info                  CSI    00000329 [SR] Cannot repair member file [l:24{12}]"iasrecst.dll" of Microsoft-Windows-Networking-Internet_Authentication_Service_DataStore, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3489: 2012-12-23 02:18:47, Info                  CSI    0000032a [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
 Line 3494: 2012-12-23 02:18:47, Info                  CSI    0000032d [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"iasrecst.dll"; source file in store is also corrupted
 Line 3497: 2012-12-23 02:18:47, Info                  CSI    0000032f [SR] Cannot repair member file [l:30{15}]"OnLineIDCpl.dll" of Microsoft-Windows-OnLineIDCPL, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3498: 2012-12-23 02:18:47, Info                  CSI    00000330 [SR] This component was referenced by [l:242{121}]"Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.Microsoft-Windows-Client-Features-Update"
 Line 3503: 2012-12-23 02:18:47, Info                  CSI    00000333 [SR] Could not reproject corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:30{15}]"OnLineIDCpl.dll"; source file in store is also corrupted
 Line 3506: 2012-12-23 02:18:47, Info                  CSI    00000335 [SR] Cannot repair member file [l:30{15}]"NlsData002a.dll" of Microsoft-Windows-NaturalLanguage6, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3507: 2012-12-23 02:18:47, Info                  CSI    00000336 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
 Line 3512: 2012-12-23 02:18:50, Info                  CSI    00000339 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:30{15}]"NlsData002a.dll"; source file in store is also corrupted
 Line 3515: 2012-12-23 02:18:52, Info                  CSI    0000033b [SR] Cannot repair member file [l:20{10}]"viaide.sys" of mshdc.inf, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 3516: 2012-12-23 02:18:52, Info                  CSI    0000033c [SR] This component was referenced by [l:194{97}]"Microsoft-Windows-Common-Drivers-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.CRITDOQ-INF_mshdc"
 Line 3533: 2012-12-23 02:18:52, Info                  CSI    0000033e [SR] Repair complete

CheckSUR

Code:

Unavailable repair files:
 winsxs\manifests\amd64_556faf3bc2886a43e734bc28f9b94eec_31bf3856ad364e35_6.1.7601.17955_none_07b2684348870483.manifest
 winsxs\manifests\amd64_mscorlib_b77a5c561934e089_6.1.7601.17559_none_546939b8697f8773.manifest
 winsxs\manifests\x86_mscorlib_b77a5c561934e089_6.1.7601.17559_none_9c16708f7dfbb079.manifest
 winsxs\manifests\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_none_93b21c24844efba7.manifest
 servicing\packages\Package_146_for_KB2756822~31bf3856ad364e35~amd64~~6.1.1.0.mum
 servicing\packages\Package_146_for_KB2756822~31bf3856ad364e35~amd64~~6.1.1.0.cat

Don't worry too much about the numbers

It's too late to do this tonight - my eyes are beginning to feel like sugar-cubes!

I'll get to it in the morning.

zatoichi · Dec 26, 2012

Just downloaded and installed all updates without issue. Went to the validate website and got the all clear.

Looks like the problem is fixed.

Thanks for all your help!

Not running genuine windows / Update failure Code 8000FFFF

New member

My Computer

Confusion Therapist

My Computer

New member

My Computer

Confusion Therapist

My Computer

New member

My Computer

Confusion Therapist

My Computer

New member

My Computer

Confusion Therapist

My Computer

New member

My Computer

Confusion Therapist

My Computer

New member

My Computer

Confusion Therapist

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

New member

My Computer

Three-Toed Sloth

My Computer

Three-Toed Sloth

My Computer

Three-Toed Sloth

My Computer

New member

My Computer